This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json) Hash identifier: bonKY+4aJJcYRboqboDYm4TZBJxguaiiKPislpZMXQk= Subject key identifier: 97:B6:C7:00:38:77:33:DC:81:C6:3E:81:8E:A0:AF:2A:1B:F8:FF:C0 Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2 Certificate serial: 019B7AB823D6B45C6FB12DB3E33A183B64DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft Manifest number: 17AA Signing time: Thu 01 Jan 2026 18:00:46 +0000 Manifest this update: Thu 01 Jan 2026 18:00:46 +0000 Manifest next update: Fri 02 Jan 2026 18:00:46 +0000 Files and hashes: 1: 1-5QJBLxp5AmzSVUk8qikofQqav4.roa (hash: bXIAnhQl9MhR5WL6f2K74RtvR0mnQzIz2IKnZ9vIJ10=) 2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: R8djprj/sZGh5gz5fDLOxBsyYn6DKoNofmbGhCuMaGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 17:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:b8:23:d6:b4:5c:6f:b1:2d:b3:e3:3a:18:3b:64:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2 Validity Not Before: Jan 1 18:00:46 2026 GMT Not After : Jan 2 18:00:46 2026 GMT Subject: CN=97b6c700387733dc81c63e818ea0af2a1bf8ffc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:63:fd:8b:6d:6e:25:05:94:b9:ff:87:8f:6c: 1f:58:e9:f2:2d:b4:2c:22:28:8a:71:6e:b3:d7:2f: 61:f2:e5:06:be:cd:0a:d4:1c:f0:22:39:d6:22:a9: 5a:d1:53:6e:05:69:5c:67:6e:ca:ca:74:99:bd:bd: fc:54:81:6d:ec:3f:2b:dc:d8:8c:a7:79:a1:77:f4: be:54:9b:d5:72:e9:4e:2f:51:71:62:43:2b:84:b4: ad:6f:00:f5:22:3a:51:6d:ff:08:ac:cb:13:20:31: 8c:b2:59:b1:eb:f5:8d:ad:52:16:5b:6b:31:1f:3e: 56:8a:96:00:27:2e:ae:50:45:78:8b:47:97:55:07: 41:ae:ec:38:c4:4c:69:c3:2d:4d:de:f8:d1:58:d7: ec:cd:86:2e:ac:50:37:ee:5f:fb:86:51:9d:68:78: 54:0e:ca:5c:eb:04:91:16:ff:d2:7e:db:8b:f6:70: de:e0:14:4b:14:0d:c2:32:0c:4c:50:46:f3:fb:35: 11:51:aa:2d:af:34:5b:93:63:64:49:a3:c3:02:98: db:f2:a8:83:af:bb:83:ac:7c:c3:33:03:13:8f:6a: 94:ab:41:13:13:10:86:a8:2e:5f:5e:e6:69:06:82: ba:a4:5f:e1:8f:59:a6:39:a1:14:e6:63:8d:60:2f: 43:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B6:C7:00:38:77:33:DC:81:C6:3E:81:8E:A0:AF:2A:1B:F8:FF:C0 X509v3 Authority Key Identifier: keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:57:b6:ca:88:d3:a8:f7:77:fc:81:97:6a:9e:82:e0:45:47: a5:d6:4f:81:20:7f:d0:36:9b:0d:b1:5e:84:5f:81:77:22:b5: b6:3d:24:6e:01:2e:fc:3f:72:6f:e8:ed:45:e8:ec:c9:b2:79: ea:40:41:22:c7:2a:ac:61:30:8e:10:78:f1:d6:9f:63:78:71: cb:70:17:cd:0f:0e:57:b0:77:bf:d7:2f:58:9f:03:6d:6a:f9: ea:f2:f0:a0:23:01:8d:dc:7c:a3:e1:89:cb:f0:d0:73:89:26: 7b:1d:c5:da:6b:d9:78:89:7c:be:56:8e:34:a8:dc:71:15:e0: ed:b7:f9:8a:31:6a:67:b9:97:b0:46:89:dd:8e:6a:1f:60:2c: 06:a3:92:e8:1a:fd:6b:44:6b:ba:76:6a:b8:6c:e4:94:42:e9: 1e:68:b7:bb:f3:ce:24:38:2b:25:de:90:f7:02:a4:23:0f:80: 4f:fc:77:c1:8b:73:8a:9c:2f:44:cb:c6:a3:1c:76:6d:b4:5a: 89:be:1a:d6:fb:b3:fd:61:1a:5b:1f:27:7d:94:9b:ee:60:bc: e7:17:cb:fa:82:07:1c:25:9a:fb:36:78:e9:ba:40:73:fc:4e: 64:d8:a5:68:12:de:d4:02:75:9f:7f:52:2f:c9:97:be:c7:c5: 21:0f:e1:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6uCPWtFxvsS2z4zoYO2TbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNzY3MDZkM2UwODgxM2RiOGIyNzc2NjI4YWY4NDY1MThl MjZkZDIwHhcNMjYwMTAxMTgwMDQ2WhcNMjYwMTAyMTgwMDQ2WjAzMTEwLwYDVQQD Eyg5N2I2YzcwMDM4NzczM2RjODFjNjNlODE4ZWEwYWYyYTFiZjhmZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72P9i21uJQWUuf+Hj2wfWOnyLbQs IiiKcW6z1y9h8uUGvs0K1BzwIjnWIqla0VNuBWlcZ27KynSZvb38VIFt7D8r3NiM p3mhd/S+VJvVculOL1FxYkMrhLStbwD1IjpRbf8IrMsTIDGMslmx6/WNrVIWW2sx Hz5WipYAJy6uUEV4i0eXVQdBruw4xExpwy1N3vjRWNfszYYurFA37l/7hlGdaHhU Dspc6wSRFv/SftuL9nDe4BRLFA3CMgxMUEbz+zURUaotrzRbk2NkSaPDApjb8qiD r7uDrHzDMwMTj2qUq0ETExCGqC5fXuZpBoK6pF/hj1mmOaEU5mONYC9DWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe2xwA4dzPcgcY+gY6gryob+P/AMB8GA1UdIwQY MBaAFLp2cG0+CIE9uLJ3ZiivhGUY4m3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82ZDQ3NTktYTA1ZS00NmJjLWJlNTgt NjY5ZWVkMmVjN2VhLzEvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82ZDQ3NTktYTA1ZS00NmJjLWJlNTgtNjY5ZWVkMmVjN2Vh LzEvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVe2yojT qPd3/IGXap6C4EVHpdZPgSB/0DabDbFehF+BdyK1tj0kbgEu/D9yb+jtRejsybJ5 6kBBIscqrGEwjhB48dafY3hxy3AXzQ8OV7B3v9cvWJ8DbWr56vLwoCMBjdx8o+GJ y/DQc4kmex3F2mvZeIl8vlaONKjccRXg7bf5ijFqZ7mXsEaJ3Y5qH2AsBqOS6Br9 a0RrunZquGzklELpHmi3u/POJDgrJd6Q9wKkIw+AT/x3wYtzipwvRMvGoxx2bbRa ib4a1vuz/WEaWx8nfZSb7mC85xfL+oIHHCWa+zZ46bpAc/xOZNilaBLe1AJ1n39S L8mXvsfFIQ/hmg== -----END CERTIFICATE-----Generated at Thu Jan 1 19:13:40 2026 by rpki-client